Data privacy protection

Declaration on data protection

The protection of your personal data is important to us. Of course, we guarantee their protection within the framework of legal requirements and handle your personal data carefully. With this declaration we inform you about the types of personal data we collect, the purposes for which this data is collected, how it is processed and what rights you have in this regard.

1. Responsible authority

Responsible body within the meaning of the data protection laws is

ClassiCon GmbHSigmund-Riefler-Bow 381829 MunichGermany

2. Collection and storage of personal data as well as type and purpose of their use

We collect and store personal data in the following cases. We use these exclusively in the manner and for the purposes described below.

a) Visit our website (all)

When you visit our website www.classicon.com, the browser used on your device automatically sends information to the server of our website, which is temporarily stored by the server in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

the IP address of the requesting computer,

the date and time of access,

the name and URL of the retrieved file,

the website from which access is made (referrer URL),

the browser used and

if necessary, the operating system of your computer and the name of your Internet access provider.

Log files are important sources of information for making the processes on a system traceable. They can be used, for example, for problem analysis or the reconstruction of lost data. We use the data stored with the log files in this frame:

to ensure the connection and use of our website,

to evaluate and permanently guarantee the system safety and stability,

to ensure the technical administration of the network infrastructure,

to optimize our internet offer,

to arrange for internal statistical surveys.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in data processing follows from the purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. The IP address of the requesting computer is only evaluated in the event of attacks on the network infrastructure and for statistical purposes.

b) Use of contact form

We provide a contact form for general inquiries, a contact form to our sales department and a contact form for press inquiries on our website. Depending on your request, you can use one of the above contact forms to contact the appropriate contact person at our company. In order to use our contact forms, you must always provide your title and name, the country from which you are contacting us, a valid e-mail address and the background of your contact. If you use the general contact form or the contact form for our sales department, it is also necessary to specify the company for which you are making the enquiry and a valid telephone number. If you use the press contact form, you must specify the publisher/publication for which you are making the enquiry.

By providing your contact details, you agree that we may use them to respond to your request.

We process the data you make available to us exclusively for the purpose of being able to process and respond to your request.

Please note that the use of our contact form is not necessary to contact us. We will also be happy to answer your questions using the other contact details provided on our website. The personal data collected by us to process your enquiry will be automatically deleted after the enquiry you have made has been dealt with.

c) Registration picture archive

You have the possibility to register via our website to use our picture archive. In order to use the pictures stored there, you must create a user profile and agree to our copyright provisions. When creating the user profile, we collect the following data from you:

Your title, surname and first names,

Your e-mail address,

Company,

Country,

Profession (dealer, architect, press, other),

the IP address provided by your Internet service provider when you register,

the date and time of your registration,

the password you have chosen,

the confirmation of the copyright regulations.

These data are processed in order to

to identify you as a registered user of our picture archive,

to give you access to our picture archive,

document your confirmation of our copyright provisions,

to evaluate the use of the picture material,

to prove possible misuse of your e-mail address at a later point in time,

to be able to trace possible infringements of our copyright regulations.

The processing of your personal data is necessary in order to administer your registration in our picture archive and to be able to provide you with the picture material stored there, Art. 6 Par. 1 S. 1 lit. b GDPR. Insofar as we use the processed data to evaluate the usage behaviour of the photographic material and to monitor compliance with the copyright regulations, this is in our legitimate interest, Art. 6 Par. 1 S. 1 lit. f GDPR.

d) Newsletter registration

With our electronic newsletter we inform you regularly about our products, new products, projects, designers and our events. You will also receive invitations to our special sale in Munich.

You can register to receive our electronic newsletter via our website. When you register, we use the so-called double opt-in procedure, i.e. registration is not completed until you confirm your wish to receive our electronic newsletter via a link that you receive in an e-mail that we send to you at your request. In this case we will collect the following personal data from you:

Your e-mail address,

your chosen language option (German or English),

your country (not mandatory),

the IP address provided by your Internet service provider upon confirmation of the link,

the date and time of confirmation of the link.

These data are processed in order to

to send you the newsletter,

to write to you in the convenient language,

to provide you with country-specific information and activities,

the declaration of your consent to receive the electronic newsletter and

to prove possible misuse of your e-mail address at a later point in time.

The legal basis for data processing is your consent, which you give when registering for our newsletter, Art. 6 Par. 1 S. 1 lit. a GDPR.

If you call up our newsletters or the contents of our newsletter, technical information and data on user behaviour will also be collected, enabling us to optimise our services for you both technically and in terms of content. The following data will be collected:

Information about the operating system and browser used,

whether the newsletter will be opened (date/time),

which articles/links are called up in the newsletter (date/time),

the place from which the newsletter was accessed.

The legal basis for data processing is our legitimate interest in being able to provide you with an offer that meets your technical and content requirements via our newsletter, Art. 6 Par. 1 S. 1 lit. a GDPR.

e) Cookies and analysis services (all)

Finally, we use cookies and analysis services when you visit our website. You will find more detailed explanations under sections 4 and 5 of this data protection statement.

3. Passing on your data to third parties

Your personal data will not be transmitted to third parties for purposes other than those listed below:

We will only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,• the disclosure pursuant to Art. 6 para. 1 sentence 1 f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,• in the event that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, • this is legally permissible and is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Cookies

Like many other websites, we use so-called "cookies". Cookies are small text files that your web browser automatically stores on your computer's hard drive when you visit our website. We automatically receive certain data, such as IP address, the browser you use and can analyze your usage behavior in anonymous form when you visit our website. Cookies cannot cause any damage to your hard disk. In particular, these cannot be used to start programs and/or transmit viruses. We do not receive personal data about you through the cookies. It is not possible for us to assign the information stored in the cookies to an identified or identifiable natural person.

Cookies help us in many ways to make your visit to our website easier, more pleasant and more meaningful. For example, by analyzing the usage behavior of visitors to our website, we are able to tailor our services to your needs. If personal data is processed by individual cookies, this is justified by our legitimate interest in offering you optimal functionality of our website and in operating our website as efficiently and economically as possible, Art. 6 Para. 1 S. 1 lit. f GDPR.

Of course, you can also view our website without cookies. Most Internet browsers are configured to accept cookies automatically. However, you can deactivate this function at any time or configure your browser to display a message whenever you receive a new cookie. You can delete cookies that have already been stored. However, we would like to point out that the deactivation of cookies can lead to the fact that you cannot use all functions of our website.

5. Google Analytics

We use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"), to optimise the offer on our website. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website, such as

• Browser type/version,• the operating system used,• Referrer URL (the previously visited page),• Host name of the accessing computer (IP address),• Time of the server request.

are usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will previously be reduced by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website use and Internet use.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the following browser plug-in.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in future as long as the cookie remains installed in your browser.

We use so-called plugins (buttons) of different social networks on our website, so that you can also use the interactive possibilities of the social networks you use on our website. With these plugins different functions are provided, whose subject and extent is determined not by us but by the operators of the social networks.

Please note that we are not providers of social networks and have no influence on the data processing and content of the respective service providers. The legal basis for the use of the plugins is, insofar as the processing of personal data occurs when linking via social media plugins, this is in our legitimate interest to enable you to interact directly with social networks of which you are a member via the design of our website and in our legitimate interest in providing interaction possibilities for the purpose of advertising," Art. 6 para. 1 f EU GDPR.

The following social media plugins are used by us. We would like to inform you about how they work as follows:

a) Facebook

Our website includes plugins of the social network "Facebook", 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our page. An overview of the Facebook plugins can be found here.

When you activate the plugin, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our website with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can refer to the content of our pages in your Facebook profile.

We would like to point out that we are not aware of the content of the data transmitted or how it is used by Facebook and that we are not responsible for Facebook's data processing. For more information, please see Facebook's Privacy Policy.

b) Twitter

Our website includes functions of the social network "Twitter". These functions are provided by Twitter Inc, Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that we are not aware of the content of the data transmitted or how it is used by Twitter. For more information, please see Twitter's privacy policy.

c) YouTube

We use YouTube for the integration of videos on our website. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you access the websites on our website that are provided with such a plugin - for example our media library - a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our Internet pages you have visited. If you are logged in as a YouTube member, YouTube assigns this information to your personal user account. When using the plugin, e.g. clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube account and other user accounts of YouTube LLC and Google Inc. and deleting the corresponding cookies of the companies before using our website.

We would like to point out that we are not aware of the content of the data transmitted or how it is used by Facebook and that we are not responsible for Facebook's data processing. For more information, please see YouTube's privacy policy.

7. Social networks

We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we will process the data of users who communicate with us within social networks and platforms, e.g. write articles on our websites or send us messages.

If users leave comments or other contributions on our social media presences, their IP addresses will be used on the basis of our legitimate interests within the meaning of Art. 6 (1) (f). GDPR for 7 days. This takes place for our safety, if someone leaves illegal contents in comments and contributions (insults, forbidden political propaganda, etc.). In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.

8. Data security

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser. If SSL or TSL encryption is activated, the data you transmit to us cannot be read by third parties.

9. Duration of data storage

In accordance with the principles of data avoidance and economy, your information will not be processed by us for longer than is necessary for the purpose for which it was collected or as provided for by law. As soon as the purpose of data processing has expired and/or legal storage periods have expired, the data stored by you will be deleted.

10. Rights of the data subject

As far as you are affected by the processing of personal data, you have the following rights:

a) Right to information, Art. 15 GDPR

According to Art. 15 GDPR you have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.

b) Correction and completion, Art. 16 GDPR

According to Art. 16 GDPR, you have the right to immediately request the correction of incorrect or complete personal data stored by us.

c) Cancellation, Art. 17 GDPR

Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

d) Restriction of processing, Art. 18 GDPR

According to Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 GDPR.

e) Provision of stored data, Art. 20 GDPR

In accordance with Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible.

f) Revocation of consents granted, Art. 7 para. 3 GDPR

According to art. 7 para. 3 GDPR you have the right to revoke your consent at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future.

g) Right of appeal, Art. 77 GDPR

According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our office.

11. Right of objection

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@classicon.com.

12. Change of our data protection regulations

We reserve the right to adapt our data protection declaration to ensure that it always complies with the applicable legal requirements, especially in the event of changes to our services. When you visit our website, the current version of the data protection statement published on our website always applies.

13. Questions to the data protection officer

If you have any questions about our data protection, please contact our data protection officer directly at datenschutz@classicon.com